General
- Target 2026-07-09_2526083918c73134c6c7b64e93110aad_akira_amadey_blackenergy_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 12.4MB
- Sample260709-p9wpwsaz7j
- SHA256 b5d8b6838ac58fbfd5df13a316d7b742dd12cc2e52f2fbcb0082b795a7a4939f
- MD5 2526083918c73134c6c7b64e93110aad
- SHA1 173ad12ccbd5564cac0353caa35590df99535efe
- SHA512 761ab1c1d22997ab84ea8c7f0914fff15bad29c9d55cfd5360f71c52d404becb856ac433728ede11de436f4de160a645e45133e192cde98db074182f47f49137
- SSDEEP 196608:vGBfW7GBfWAbvd/Kmd08gTH2qBpu1QfLIqsWyZ/K0ttYVAATMo3:UWIWAsqKTHNBpu1QfcOyZ/K0ttYZTD3
- TLSH T121D64B13A19910ACD1AAD174CF568625EB317C8A47F5A4EF2280B6E52F77AF03F38711
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-09_2526083918c73134c6c7b64e93110aad_akira_amadey_blackenergy_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_2526083918c73134c6c7b64e93110aad_akira_amadey_blackenergy_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
- Size 12.4MB
- SHA256 b5d8b6838ac58fbfd5df13a316d7b742dd12cc2e52f2fbcb0082b795a7a4939f
- MD5 2526083918c73134c6c7b64e93110aad
- SHA1 173ad12ccbd5564cac0353caa35590df99535efe
- SHA512 761ab1c1d22997ab84ea8c7f0914fff15bad29c9d55cfd5360f71c52d404becb856ac433728ede11de436f4de160a645e45133e192cde98db074182f47f49137
- SSDEEP 196608:vGBfW7GBfWAbvd/Kmd08gTH2qBpu1QfLIqsWyZ/K0ttYVAATMo3:UWIWAsqKTHNBpu1QfcOyZ/K0ttYZTD3
- TLSH T121D64B13A19910ACD1AAD174CF568625EB317C8A47F5A4EF2280B6E52F77AF03F38711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Futurax
-
Detects executables packed with MEW
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1